Drupal devs warn of remote code execution vulnerability affecting ~1M sites running Drupal 6, 7, or 8, call it “highly critical”, and urge immediate patching
A dangerous Drupal flaw could leave your site completely compromised if you don't patch the flaw immediately.